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In the Claims : 

Please amend the claims as follows: 

1 . (Currently Amended) A method for a secure transaction over a multi-computer 
network comprising the steps of: 

a. providing at least two separate computer programs that are designed to 
communicate with each other over a multi-computer network, each 
separate computer program resident and runnable on a separate computer 
of the multi-computer network, at least one of the at least two separate 
computer programs further being a security server program for receiving 
and processing the secure transaction and at least one of the at least two 
separate computer programs further being a customer program; 

b. running the security server program on a substantially continuous basis 
thereby making it available to receive secure transactions; 

c. running the customer program on an as needed basis for communicating 
with the security server program with the customer program across a first 
communication port; 

d. receiving a dynamically assigned port address from the security server 
program, further, receiving from the security server program a public set 
of numbers and a security server intermediate value that was calculated 
using at least the public set of numbers; 
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e. switching the customer program to the second dynamically assigned port 
address for further communications with the security server program; 

f. having the customer program calculate a customer intermediate value 
using at least the public set of numbers and a shared final value using at 
least the customer intermediate value and the security server intermediate 
value; 

g. sending the customer intermediate value to the security server program; 

h. having the security server program calculate the shared final value using 
the customer intermediate value and the security server intermediate 
value; 

i. having both the security server program and the customer program create 
an encryption key using at least the shared final value; 

j. having the customer computer encrypt transaction information using the 
encryption key; 

k. sending the encrypted transaction information to the security server 
program: 

1. having the security server program de-crypt the encrypted transaction 

information; and 
m. having the security server program process the transaction. 

2. (Original) The method according to claim 1 wherein the public set of numbers is 
at least a public prime number and a prime modulus number. 
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3. (Original) The method according to claim 2 wherein the customer intermediate 
value is further calculated using a customer selected random number and the 
security server intermediate value is calculated using a security server selected 
random number. 

4. (Original) The method according to claim 3 wherein the shared final value is 
calculated by the customer computer program using at least the security server 
intermediate value, the customer selected random number, and the prime 
modulus; and the shared final value is calculated by the security server program 
using at least the customer intermediate value, the security server selected random 
number, and the prime modulus. 

5. (Original) The method according to claim 4 wherein the step of creating an 
encryption key using at least the shared final value comprises at least the step of 
passing at least a portion of the shared final value through a further encryption 
algorithm. 

6. (Original) The method according to claim 5 wherein the further encryption 
algorithm is a one-way function. 

7. (Currently Amended) The method according the claim 6 4- further including the 
step of having the customer computer program send customer profile information 
to the security server program for comparison with customer profile information 
previously stored on a computer memory accessibly by the security server 
program, thereby verifying the identity of the customer. 
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8. (Original) The method according the claim 1 further including the step of having 
the customer computer program send customer profile information to the security 
server program for comparison with customer profile information previously 
stored on a computer memory accessibly by the security server program, thereby 
verifying the identity of the customer. 

9. (Original) The method according to claim 7 wherein the customer profile 
information comprises a pass phrase that may have white spaces and answers to 
customer created personal information questions. 

10. (Original) The method according to claim 8 wherein the customer profile 
information comprises a pass phrase that may have white spaces and answers to 
customer created personal information questions. 



